[월:] 2017년 03월

No Image

USN-3222-1: ImageMagick vulnerabilities

2017-03-08 KENNETH 0

USN-3222-1: ImageMagick vulnerabilities Ubuntu Security Notice USN-3222-1 8th March, 2017 imagemagick vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 16.10 Ubuntu 16.04 LTS Ubuntu 14.04 LTS Ubuntu 12.04 LTS Summary Several security issues were fixed in ImageMagick. Software description imagemagick – Image manipulation programs and library Details It was discovered that ImageMagick incorrectly handled certain malformedimage files. If a user or automated system using ImageMagick were trickedinto opening a specially crafted image, an attacker could exploit this tocause a denial of service or possibly execute code with the privileges ofthe user invoking the program. Update instructions The problem can be corrected by updating your system to the following package version: Ubuntu 16.10: libmagick++-6.q16-5v5 8:6.8.9.9-7ubuntu8.4 imagemagick 8:6.8.9.9-7ubuntu8.4 libmagickcore-6.q16-2-extra 8:6.8.9.9-7ubuntu8.4 imagemagick-6.q16 8:6.8.9.9-7ubuntu8.4 libmagickcore-6.q16-2 8:6.8.9.9-7ubuntu8.4 Ubuntu 16.04 LTS: libmagick++-6.q16-5v5 8:6.8.9.9-7ubuntu5.5 imagemagick 8:6.8.9.9-7ubuntu5.5 libmagickcore-6.q16-2-extra 8:6.8.9.9-7ubuntu5.5 imagemagick-6.q16 8:6.8.9.9-7ubuntu5.5 libmagickcore-6.q16-2 8:6.8.9.9-7ubuntu5.5 [ more… ]

No Image

RHSA-2017:0462-1: Moderate: java-1.8.0-ibm security update

2017-03-08 KENNETH 0

RHSA-2017:0462-1: Moderate: java-1.8.0-ibm security update Red Hat Enterprise Linux: An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 6 Supplementary and Red Hat Enterprise Linux 7 Supplementary. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. CVE-2016-2183 Source: RHSA-2017:0462-1: Moderate: java-1.8.0-ibm security update

No Image

RHSA-2017:0461-1: Critical: firefox security update

2017-03-08 KENNETH 0

RHSA-2017:0461-1: Critical: firefox security update Red Hat Enterprise Linux: An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. CVE-2017-5398, CVE-2017-5400, CVE-2017-5401, CVE-2017-5402, CVE-2017-5404, CVE-2017-5405, CVE-2017-5407, CVE-2017-5408, CVE-2017-5410 Source: RHSA-2017:0461-1: Critical: firefox security update

No Image

RHEA-2017:0460-1: nspr, nss-util, and nss bug fix and enhancement update

2017-03-08 KENNETH 0

RHEA-2017:0460-1: nspr, nss-util, and nss bug fix and enhancement update Red Hat Enterprise Linux: Updated nspr, nss-util, and nss packages that fix several bugs and add various enhancements are now available for Red Hat Enterprise Linux 7. Source: RHEA-2017:0460-1: nspr, nss-util, and nss bug fix and enhancement update

No Image

RHSA-2017:0459-1: Critical: firefox security update

2017-03-08 KENNETH 0

RHSA-2017:0459-1: Critical: firefox security update Red Hat Enterprise Linux: An update for firefox is now available for Red Hat Enterprise Linux 5 and Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. CVE-2017-5398, CVE-2017-5400, CVE-2017-5401, CVE-2017-5402, CVE-2017-5404, CVE-2017-5405, CVE-2017-5407, CVE-2017-5408, CVE-2017-5410 Source: RHSA-2017:0459-1: Critical: firefox security update